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Don't  let  anyone  tell  you  that  freedom  comes  at  the  cost  of  control.  With  Windows®  7  and  Windows  Server*  2008,  users  get 
more  powerful  search,  smoother  multitasking  and  the  ability  to  work  from  virtually  anywhere  without  a  VPN.  Add  System 
Center  and  the  Microsoft*  Desktop  Optimization  Pack,  and  you  get  more  automated  PC  management  and  increased  control 
over  your  environment  Control  for  you  and  flexibility  for  your  users.  Optimized  may  not  be  a  strong  enough  word. 

To  learn  more  about  how  desktop  optimization  can  drive  efficiencies  go  to  itseverybodysbusiness-com/optimize 


Snap  this  tag  to  get  the  latest 
news  on  desktop  optinnization 
or  text  OPTIMIZE  to  21710 

Get  the  free  app  for  your  phone  at 

httpV/getlegJnebi 
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an  effort  to  allay 

Oracle  execs 
promise  to  continue  support  of  some 
key  Sun  product  Ikies. 


Obama  calls  on  fed¬ 
eral  agencies  to  adopt 
the  best  practices  of 
private-sectordatacenters- 
and  that  coukJ  lead  to  a  radical 
change  in  government  IT  operations. 
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RESPONSE  TO; 

ITsSBig 
Security  Mistakes 

Jan.  13. 2010 


Kenneth  Van  Wyk  makes  some  ex¬ 
cellent  points,  but  it  is  appropriate 
to  point  out  that  the  signatures  used 
by  today’s  anti-malware  programs 
have  little  in  common  with  the  anti¬ 
virus  programs  of  10  years  ago.  let 
alone  20.  Just  as  malicious  logic  has 
increased  in  sophistication,  so  have 
the  tools  that  combat  it.  Positive 
validation  is  definitely  needed,  but 

this  too  is  just  one  layer  of  security 

and  should  not  be  over-relied  upon. 

■  SuhnItM  by:  Aryeh  Gomtsky 

RESPONSE  TO: 

Drinking  Google’s 
Milkshake 

Jan.  15, 2010 


Google  is  not  stupid.  It  knows  pull¬ 
ing  out  of  China  won’t  keep  hackers 
out.  (Or  not  much,  anyway.  Physical 
access  is  still  the  best  way  to  hack  a 
computer,  so  it  would  be  more  dif¬ 
ficult  for  Chinese  hackers  if  Google 
were  no  longer  there.)  But  Google  is 


providing  a  lot  of  work  for  the  Chi¬ 
nese.  It’s  a  bargaining  tool. 

■  Submittwl  by:  Daniel 

RESPONSE  TO: 

Health  Care  Refonn 
We  Can  An  Agree  On 

Jan.  18, 2009 


Steven  J.  Vaughan-Nichols  says  he 
wants  ER  physicians  to  know  ev¬ 
erything  they  can  about  him,  and 
he  makes  it  sound  like  EHRs  can 

save  your  life.  They  can  also  kill  a 

patient  as  fast  as  anaphylaxis. 

Someone  who  steals  digital  health 
records  to  fraudulently  obtain 
health  care  can  alter  the  record,  and 
ER  physicians  will  never  have  a  chie 
until  a  post-mortem  investigation 
reveals  that  the  victim  had  allergies 
that  had  been  deleted  by  a  thief. 

At  the  moment,  there  are  more 
bad  things  about  EHRs  than  good. 
Besides,  Americans  don’t  trust 
them.  EHRs  will  never  succeed 
without  consumer  support. 

■  SubmiltMl  by:  D.  Kelbts  Pruitt 
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Aid  Workers  Rebuilding  Haiti  Networks 


U  scrambling  to  rebuild  communica¬ 
tions  in  Haiti  following  the  cata¬ 
strophic  Jan.  12  earthquake  there. 
Haiti's  wired  telecommunications  system 
was  devastated,  and  it' is  still  nearly  im¬ 
possible  for  most  people  to  make  a  land¬ 
line  call  said  Rick  Perera,  a  spokesman 
for  CARE,  a  U.S.-based  aid  organization. 

“When  you  drive  around  and  look  at  what 
the  wires  and  poles  look  like,  it's  just  beyond 
imagination,”  Perera  said.  He  predicted  that 
the  country  may  abandon  its  wired  net¬ 
work  and  go  strictly  wireless  as  it  rebuilds. 

In  the  first  few  days  after  the  quake,  the 
only  way  CARE  employees  could  reliably 
communicate  with  headquarters  in  Atlanta 
was  via  SMS  texting,  Perera  said.  But  the 
situation  is  gradually  improving  as  some 
cell  phone  service  and  BlackBerry  e-mail 
service  is  restored.  Plus,  aid  groups  have 


rushed  to  install  broadband  satellite  links. 

As  of  late  January,  the  wired  broadband 
in  CARE'S  Haiti  office  was  working  inter¬ 
mittently,  and  the  organization's  Internet 
service  provider  had  managed  to  upgrade 
the  link  to  about  IMbit/sec.,  Perera  said. 
CARE  brought  in  its  own  IT  specialist 
from  the  U.S.  and  has  been  setting  tq> 
voice-over-IP  phones,  while  communica¬ 
tions  aid  group  NetHope  Inc.  has  been 
helping  CARE  set  up  a 
VSAT  satellite  connec- 

Meanwhile,  T3m>ms 
Sans  Frontines,  an  emer¬ 
gency  telecommunications  aid  groiq>,  has 
set  up  broadband  satellite  links  for  the 
United  Nations  peacekeeping  force,  the 
national  police  headquarters  and  an  aid 
operations  center  at  Haiti's  main  airport 

-  Stephen  Lrnvson,  IDG  News  Service 


Carbon-Tracking 
Software  Market 
Starts  to  Get  Hot 

Before  2008,  if  companies  tracked 
their  carbon  emissions  at  al.  they 
poured  the  data  into  spreadsheets. 
But  a  new  category  of  software, 
caffed  enterprise  carbon  account¬ 
ing  (ECAX  is  headed  for  'explosive 
growth' this  year  and  next,  accord¬ 
ing  to  market  research  by  Groom 
Energy  Solutions  in  Salem,  Mass. 

Despite  the  recession,  there 
were  positive  signs  for  the  market 
last  year,  with  ECA  start-ups 
receiving  more  thanMfimilfionln 
venture  capltai.  the  research  hrm 
said  in  a  statement  In  addition, 
software  giantsCA.MIcrosoftand 
SAP  entered  the  market 

Starting  from  a  tiny  base,  the 
number  of  softW  customers 

wl  increase  fivefold  by  20n.  the 
study  said.  Groom  En^  pointed 
to  three  fackxs  driving  demand 

■  Pressure  from  customers 
and  Investors  to  create  a  greener 
public  image. 

■  A  desire  to  save  money  and 
energy  by  investing  in  sustainabil¬ 
ity  projects. 

■  Mandates  from  buyers  such 
as  Wal-Mart,  which  pfans  to  ask 

100.000  suppliers  to 

B  track  the  carbon  emis¬ 
sions  of  their  goods. 

Groom  Energy  identi¬ 
fied  60  ECA  vendors 
and  said  that  the  market  leaders 
are  Enablon.  Enviance.  Hara  Soft¬ 
ware.  HIS  Inc.,  Johnson  Controls, 
PE  International.  ProcessMAP 
and  SAP. 

-  MITCH  BEUS 


CIOs  Clamor  for  Usage-Based  Pricing 


eager  for  vendors  to  adopt  pay- 
pei-use  models  that  better  align  cost 
with  consumption,  according  to  an  IDC 
report  published  last  month. 

Vendors  that  are  eager  to  keep  min¬ 
ing  today’s  rich  vein  of  upfront  licensing 
revenue  may  resist.  But  they  risk  los- 


olfer  pricing  schemes  closer  to  true  pay- 
per-use  models,  IDC  said. 

“Customers  believe  they  have  been 
forced  to  buy  more  software  than  they 
need  or  use,”  wrote  IDC  analyst  Amy 
Konary.  This  creates  a  “value  discon¬ 
nect”  that  isn’t  alleviated  by  heavy  dis¬ 
counting,  she  said. 

Konary  argued  that  vendors  should 
move  to  pay-per-use  models,  under 
which  they  will  have  to  do  more  to  make 
sure  customers  are  satisfied,  and  “where 
real  value  is  in  the  ease,  intuitiveness. 


.Micro 

l^iirst 


S204 


Web-based  storage  service.  EC2,  which 
lets  companies  host  their  own  software 
and  pay  for  it  based  on  the  number  of 
application-hours  used. 

That’s  not  true  usage-based  pricing  — 
users  pay  the  same  rate  whether  the  app 
is  heavily  or  lightly  used  —  but  it  allows 
customers  to  “purchase  at  a  more  granu¬ 
lar  level  than  was  previously  possible,” 
Konary  said. 

Vendors  are  justified  in  fearing  they 
would  lose  revenue  firom  usage-based  pric¬ 
ing,  she  wrote,  but  CIOs  want  assurance 
that  costs  won’t  suddenly  spike  as  a  result 
of  unexpectedly  heavy  usage.  A  compro¬ 
mise  would  be  the  kind  of  tiered  pricing 
used  by  cell  phone  carriers.  Konary  said. 


Users  Want 
Reliability, 
Not  Metrics 

IT  service  metrics  are  important, 
tut  Chuck  Musciano.  CIO  at  Mar¬ 
lin  Marietta  Materials,  warns  IT 
managers  to  remember  that  end 
users  want  good  service,  not  good 
service  metrics. 

Wtitingonhisblog.TheEi- 
fecthre  CK).  Musciano  gave  the 
example  ol  a  caUe  TV  company 
responding  to  an  outage  during 
the  Super  Bowl  by  saying.  “Even 
though  we  project  that  the  outage 
wfl  last  for  at  least  lour  hours, 
that  sta  means  that  we  provided 
service  99.72%  ot  the  lime.  This 
easily  exceeds  our  99.5%  target 
metric  lor  excellent  servicer 

Customers  wouldnl  be  happy 
with  that  response,  “yet  many 
talks  in  IT  hide  behind  metrics  in  a 
similar  fashion.'  Musciano  said. 

“From  the  user’s  perspective. 
avaiabiMy  is  measured  as  a  bina¬ 
ry  value:  yes  or  no.' he  explained 
”700  eilher  provide  your  senrice  or 
you  don't.  Metrics  matter  ntemally 
so  that  we  can  Improve  our  ser¬ 
vice.  But  they  have  little  bearing 
on  user  opinion  and  can  actually 
do  mote  harm  than  good.  Use 
them  wisely.' 


Deal  Done,  Oracle  Looks 
To  Reassure  Sun  Users 

Oracle  rares  back  product  SSrSZSSL.- 

lines  to  focus  on  UltraSparc,  tionbacktoprofitabuity. 

Claris,  java  and  MySC^'- 

By  Patrick  Thibodeau 


0  be  shipped  back  to  £acto- 
ies  to  be  updated  with  new 
larts,  according  to  Reese. 
University  of  Delaware 


build-to^rder  nxxlel  that  time  Sun  customer,  said 
will  get  the  hardware  opera-  one  message  he  heard  is 
tion  back  to  profitability.  that  Oracle  wants  to  have  a 

Oracle  has  already  re-  closer  relationship  with  Sun 
duced  the  number  of  prod-  users.  “If  they  do  that,  it  will 

ucts  on  Sun’s  price  list  by  be  good,”  he  said. 

50%,  according  to  Cindy  But  Grim  also  wants  to 

Reese,  who  was  senior  vice  see  some  product  commit- 
president  for  supply  chain  ments,  including  stronger 
operations  at  Sun  and  has  support  for  Solaris  on  x86. 


April  announcement  that  it 
h^  agreed  to  pay  $7.4  bil¬ 
lion  for  the  onetime  Silicon 
Valley  giant 
In  the  12-month  period 
that  ended  last  September, 
Sun's  share  of  worldwide 


forgotten,”  said  Charles  King,  H  fllVBS  IIM 

an^alyst  at  Pu^JT  I^nc.  |,U| 

deal  Oracle  executives  said  heOT  enOUgh  Jfrt 

that  Sun's  server  lines  would  IlMtl  lHI  WSSSUrBlI. 

be  “significantly”  pared  back  imniel  BRIM,  CTO. 
as  the  company  moves  to  a  UNIVERSITY  OF  DELAWARE 


saleq)eople — “twice  as  many 
peofAe  as  well  lay  off.”  ■ 
JanmWccahl  of  the  IDG 
News  Service  and  Comput- 
erworld’s  Erie  Ul  contributed 
to  this  story. 


federal  IT  operations. 

The  focus  on  revamping 
government  IT  shouldn’t 
siui>rise  budget  watchers. 

Over  the  past  year,  the 
Obama  administration  has 
hired  the  federal  govern¬ 
ment’s  first  CIO,  moved  to 
better  take  advantage  of 
Web  2.0  technologies  and 
solicited  advice  from  execu¬ 
tives  at  leading  technology 
development  companies  and 
user  organizations. 

In  fiict,  just  two  weeks 
before  releasing  the  budget 


M  The  rise  in  so¬ 
cial  meda  and 
WBb2j0technQlo- 
giss  has  pramn  that 
no  single  organiza- 
tion  to  a  monopoly 
on  good  ideas. 

THE  OBAMA  AOMimSTRA- 

THM’S  FISCAL  20n  FEDERAL 
BUDGET  PROPOSAL 


“The  rise  in  social  media 
and  Web  2.0  technologies 
has  proven  that  no  single 
organization  has  a  mo¬ 
nopoly  on  good  ideas,’  the 
administration  says  in  the 
doctiments. 

The  budget  also  allocates 
money  to  fund  the  use  of 
Web  2.0-style  tools  to  make 
it  easier  for  citizens  to  access 
government  data  and  inter¬ 
act  with  federal  agencies. 

The  overall  nr  budget 


She  noted  that  the  White 
House  last  year  created  an 
"IT  dashboard’  that  rates 
IT  projects  and  their  perfor¬ 
mance  at  various  ^ncies. 

Putting  such  a  spotlight 
on  the  performance  of  gov¬ 
ernment  IT  operations  is 
a  means  of  “embarrassing 
agencies  to  perform,’  she 
said,  noting  that  whereas  IT 
failures  could  put  a  private 
company  out  of  business, 
“the  ramifications  of  failure 
are  not  as  protKMinced  in 
I  goverrunent.’ ■ 
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Chris  Capossela 

Microsoft’s  Office  marketing  chief 
talks  about  adding  Twittei^like 
features  to  SharePoint  and  the 
company’s  plans  to  beat  Google  Apps. 


Chris  Capossela’s  career  path  is  a  throw¬ 
back.  just  like  Dorn's,  the  Italian  restau¬ 
rant  in  Boston’s  North  End  that  his  par¬ 
ents  runjbr  45  years.  Capossela  has  been 
at  Microsoft  Corp.  ever  since  he  gradu¬ 
ated  firm  college  some  18  years  ago, 
workinghiswayupfixmbeingBillGates' 
speechwriter  to  h^  of  the  Microsoft 
Prtgect  business,  to  his  current  role  run¬ 
ning  marketing  for  some  of Microsoft's 
most  lucrative  products;  Office,  Shxire- 
Point  and  Exchange,  as  well  as  their  new 
hosted  equivalents.  He  recently  talked  to 
Computerworld  about  how  his  family 
background  prepared  him  for  Microsoft, 
how  Microsoft  plans  to  beat  Google 
Apps,  and  how  the  company  is  adding 
Tivitter-like  features  to  SharePoint 

Vou^  bMiealy  worind  at  only  two 
ptasHkiyourMKyourfiiiilirliroslaii- 
niit  and  INcrataH.  Ttl  mo  about  your 
hat  lob.  I  grew  up  in  Boston  with  two 
older  brothers  in  an  apartment  over 
the  restaurant  my  parents  opened 
when  they  were  22.  The  apartment 
was  just  for  sleeping  —  everyone  was 
always  downstairs.  When  I  was  a  teen, 
I  worked  three  to  four  nights  a  week 
during  the  school  year,  and  six  to  seven 
nights  a  week  during  the  summers. 


■  THE  DRILL  CHRIS  CAPOSSELA 


in  areas  adjacent  to 
where  we  are  strong, 
and  naturally  grow 
into  new  areas,  cus¬ 
tomers  will  pay  us  for 
the  value  we  provide. 


Continued  from  page  8 
smart  about  having  the  boys  do  all  of  the 
jobs  in  the  restaurant  It  was  good  prepa¬ 
ration  for  Microsoft,  where  I’ve  had  a  re¬ 
ally  different  set  of  jobs,  sometimes  walk- 
ing  in  the  first  day  and  literally  knowing 
nobody  inside  that  part  of  the  company. 
I  woik^  as  chief  of  staff  to  the  Euro¬ 
pean  president  for  Microsoft  for  several 
years.  Some  pe<^  advised  me  not  to 
take  it  and  work  my  way  up.  But  because 
of  my  upbringing,  I  was  comfortable 
with  nontraditional  lateral  moves. 


will  move  to  a  new  building  and  forgo 
a  PBX,  but  those  are  eariy  adopters. 

But  with  Office  Communications  Serv¬ 
er  2010,  we’ll  be  able  to  say  in  many 
instances,  “You  don’t  need  the  PBX." 


IVP*.  Haw  do  you  eomlnca  GW*  thii 
tbon  h  tnlua  UmiOT  Take  a  people  proc¬ 
ess  like  a  performance  review.  They 
are  usually  written  in  Word,  but  the 
end  result  goes  off  in  some  HR  system 
like  PeopleSoft  or  SAP.  Budgeting  is 
another  very  horizontal  process.  Most 
companies  feel  a  lot  of  pain  around 
the  workflow  and  approval  processes. 
They  would  love  for  Office  to  be 
more  seamlessly  integrated  into  their 
PeopleSoft  system  or  SAP  systems. 

Another  good  example  is  Accenture. 
They’ve  written  a  lot  of  apps  around 
mal^  SharePoint  the  Facebook  of 
their  company.  Traditional  skills  re¬ 
positories,  where  people  are  supposed 
to  update  their  skills  into  a  line-of- 
business  app,  often  struggle  despite 
their  over^igned  back  end  because 
it’s  not  a  part  of  anyone’s  daily  process. 


Wni  Ofheu  Wib  hm  uvwy  fMturu  IM'k 
in  OfAen  2010?  Of  course  not.  We  think 
it’s  more  interesting  to  try  and  give 
you  a  great  productivity  experience 
tailored  for  a  browser  or  phone.  In 
OneNote,  you  can  take  a  photo  on  your 
smartphone  and  have  it  imported  di¬ 
rectly  into  the  app.  Or  the  Web  version 
of  PowerPoint  —  it  may  miss  some  fan¬ 
cy  animated  transitions,  but  you  can 
embed  slide  decks  straight  into  a  blog. 


biggest  thing  we  did  was  make  a  dis¬ 
tinction  between  the  developed  and 
developing  countries.  So  we  use  geo¬ 
blocking  technology  to  prevent  gray 
marketing  so  that  we  can  offer  a  4<]% 
lower  retail  price  in  India  versus  the 
U.S.,  both  for  English-language  ver¬ 
sions.  We’U  keep  doing  that.  We  also 
offered  lots  of  promos:  back  to  school, 
dads  and  grads.  There’s  no  statement 
here  on  what  we’ll  do,  but  expect  us  to 
continue  to  do  lots  of  promotions  tai¬ 
lored  for  local  countries  or  groups. 

— Interview  by  Erie  Iji 
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Bye-bye,  nest  egg. 
Late-career  IT  pros 
are  retooling  for  an 
extended  stay 
in  the  workforce. 


For  AS  LONG  as  he 
could  remember, 
Ben  Richardson  bad 
had  big  plans  for  an 
early  retirement 
Passionate  about 
computers  but  anx¬ 
ious  to  leave  the 
confines  of  a  desk  job,  Richardson,  a 
technical  adviser  in  database  services 
at  CVS/Caremark  Corp„  had  prepped 
for  a  host  of  post-tech  ahematives  even 
as  he  met  the  demands  of  his  IT  career. 

He  took  classes  and  labored  on  busi- 
ness  plans,  Hmaming  of  the  when 

he  would  able  to  retire  from  IT  and 


COVER  STORY 


fetire? 

Never 


pursue  his  love  of  what  be  calls  “blue-  jobs  now  isn’t  such  a  good  idea.”  their  job  responsibilities  as  twenty- 

collar  bobbies’  Nearly  two  years  into  the  recesskn.  somethings  just  starting  out. 

He  thought  he  might  teach  school,  shrinkingnesteggsandtbefearttfsky- 
start  an  HVAC  business  or  even  get  locketing  health  care  costs  are  forcing  WNIPPERSNAPPERS 

into  generai  contracting  and  welding.  “I  late-caieerlTprofessioaaistotrade  M  THE  REARVIEW  MIIHiOR 

wanted  to  spend  more  time  outside  and  dreams  ofearly  retirement  fw  the  reali-  ITisbardlythecmlycareeTsectorrav- 

get  healthy,”  Richardson  expiains.  “Sit-  tyoftoiiing  extra  years  in  the  worlcfoice.  aged  by  the  recessicm  —  in  foct,  experts 

ting  in  a  chair  for  30  years  takes  its  toil”  Instead  of  channeling  their  energies  say  IT  has  weathered  the  storm  better 

Scratchthat  Tharikstothe  tank-  to  around-the-world  travel  starting  a  than  most.  (For  example,  data  for  April 

ing  economy,  Richardson,  now  52,  has  new  business  or  devoting  time  to  volun-  to  June  2009  &om  the  U.S.  Bureau  of 

put  ail  those  plans  on  hoid.  “When  the  teerwrxk,  many  IT  veterans  find  them-  LaborStatisticsindicatedthatunem- 

recessionhillknewlarasn'tgcnngto  selves  either  actively  in  the  job  market  ptoymentratesfirrseveralkeylTposi- 

be  able  to  retire,”  he  says.  “I  decided  to  or  deqrerately  safeguarding  their  cur-  tions  averaged  S.8%,  which  was  sub¬ 
hunker  down  and  keep  my  current  job  rent  employment.  They’re  refocusing  stantially  lower  than  the  overali  U.S. 

because  the  market  was  so  poor.  I  have  on  career  numagement,  learning  new  averageunenq>loymentrateaf8.9%fbr 

a  good-paying  job  here,  and  changing  skills  and  trying  to  be  as  flexible  about  that  period.) 
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take  on  less-desirable  assignments. 

Overall,  the  recession  has  had  far 
more  of  an  impact  on  late-middle-aged 
adults  than  it  has  on  people  in  other  age 
groups.  In  an  April  2009  Pew  Research 
Center  study  of 2,969  adults  aged  SO  to 
64,  nearly  75%  of  the  respondents  said 
that  the  natitm’s  ectmomic  problems  are 
making  it  difficult  to  afford  retirement 

Nearly  two-thirds  of  those  surveyed 
in  that  age  bracket  said  their  401(k)  ac¬ 
counts  or  individual  stocks  had  been 
clobbered,  with  two  in  10  claiming  that 
their  investments  had  lost  40%  of  their 
value  and  another  four  in  10  saying 
nearly  20%  to  40%  of  their  retirement 
funds  had  been  erased. 

“Everyone  has  been  deeply  affected 
by  poor  stock  performance,  and  if  you're 
depending  on  a  401(k)  plan  to  retire,  you 
pi^bly  cant  do  it  just  yet,”  says  Da^ 
Van  De  Voort,  an  IT  workforce  strategy 
consultant  at  Mercer  LLC. ‘I  get  the 
sense  that  people  are  changing  their 
plans  in  earnest,”  he  says,  particularly 
in  new-economy  sectors  like  IT.  where 
retirement  savings  are  more  likely  to  be 
tied  to  the  stock  market 

Even  IT  professionals  who  are  fi¬ 
nancially  secure  say  they  are  putting 
off  retirement  for  other  reasons.  Some 
can’t  afford  —  or  aren’t  willing  to  ^lend 
the  money  on  —  the  substantial  health 
insurance  premiums  they’d  have  to  pay 
out-of-pocket  until  they  became  eligible 
for  Medicare.  And  many  of  those  who 
were  hoping  to  ease  into  semi-retirement 
with  contract  work  have  seen  a  lot  of 
those  opportunities  dry  up  and  wouldn't 
feel  comfortaUe  leaving  a  full-time  gig. 

Of  course,  some  people  aren’t  ready 
to  retire  because  they  enjoy  their  jobs, 
but  even  they  have  had  to  make  some 
adjustments.  Instead  of  being  able  to 
cruise  comfortably  through  the  twi¬ 
light  of  their  careers,  these  IT  veterans 
have  had  to  step  it  up  a  notch,  making 


eas  of  expertise,  forgo  raises  and  deal 
with  tighter  deadlines.  It  might  not 
be  the  grand  finale  that  tech  veterans 
envisioned  for  themselves,  but  it’s  the 
reality  of  today’s  market  —  one  that  all 
IT  professionals  must  adapt  to. 

“No  one  can  sit  on  their  laurels 
in  the  current  work  environment,” 
Willmer  says.  “Folks  may  not  have 
planned  on  this,  but  it’s  better  than 
the  alternative,  which  is  not  working. 
People  can’t  afford  to  coast.  They  have 
to  perform  and  get  back  in  the  game, 
especially  if  they’re  going  to  be  [woik- 
ing]  longer  than  they  anticipated.” 

To  see  how  IT  veterans  are  weath¬ 
ering  these  changes,  Conqmterworld 
checked  in  with  a  group  of  late-career 
professionals.  Here’s  what  they  had  to 
say  about  the  impact  of  the  recession 
and  their  late-career  Wan  B’s. 


~  wmiTHE 

DESK  JOB 

CVS/Caremark’s  Ben  Richardson  dili¬ 
gently  planned  for  an  early  retirement — 
for  years  he  dutifully  socked  away  10% 

-  ofhis  earnings  in  a 

401(k),  received  match¬ 
ing  funds  from  employ- 
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Continued  from  page  M 

a  toll  on  his  body  and  his  mind. 

for  another  two  to  three  years  and  then 

Fortunately,  Richardson,  who  gradu¬ 

“I've  got  arthritis  in  my  hands,  have 

reassess  the  market  for  contract  work. 

ated  from  college  with  a  degree  in 

had  carpal  tunnel  surgery  and  get  up 

Pratt  is  brushing  up  his  mainframe 

chemistry,  had  decided  even  before  the 

every  morning  and  soak  my  bands 

programming  skills,  specifically  taking 

economy  tanked  that  he  should  pursue 

in  hot  water  so  I  can  work  on  a  key¬ 

courses  in  assembler  language  —  a  skill 

a  degree  in  computer  science  for  job 

board,"  Kuhn  says.  “It's  not  like  I'm  a 

that  may  be  out  of  date  ft>r  many  markets 

insurance.  He  graduated  in  2007  from 

construction  worker  out  there  in  the 

but  is  still  valued  in  state  government 

Colorado  Technical  University,  even 

cold  with  frostbitten  fingers,  but  in 

Pratt  sees  a  future  where  he  has  a 

as  he  was  dreaming  of  making  a  career 

some  ways,  it's  just  as  hard  on  your 

leg  up  —  not  by  learning  new  Internet 

out  of  his  “blue-collar  hobbies." 

body  and  your  mentality." 

programming  technologies,  but  rather 

Now,  instead  of  once  more  retooling 

With  his  retirement  delayed,  Kuhn 

by  staying  faithful  to  the  mainframe 

his  skills  for  a  new  career,  Richardson 

says  he  doesn't  anticipate  any  radical 

skills  he  knows  best.  They  still  need 

says  he's  recommitting  to  staying  in  IT 

late-career  changes.  Instead,  he's  keep- 

my  skills  —  it  gives  me  job  stability," 

ABOUT  HEALTH 
CARE  COSTS 

Glenn  Kuhn,  a  technical  consultant  at 
Allstate  Insurance  Co.,  is  doing  what¬ 
ever  he  can  to  keep  his  job  safe. 

Kuhn,  62,  had  hoped  to  retire  between 
the  ages  of  SS  and  60,  but  he's  still  plug¬ 
ging  away  programming  mainframe 
systems,  mostly  because  he's  not  in  a  fi¬ 
nancial  position  to  move  on.  Like  many 
other  people,  he  has  seen  his  retirement 
savings  in  401(k)  plans  and  IRAs  lose  a 


calls  and  says,  "We  want  you  back  in 
the  office,'  I'm  going  to  get  the  hint  real 
quick  and  say  OK." 


Steven  Pratt,  an  eDBA  for  the  Illinois 
State  Police,  has  long  had  a  Phase  2  ca¬ 
reer  plan  that  would  leverage  his  main¬ 
frame  and  DB2  programming  skills. 
Pratt,  age  53,  had  intended  to  take  ad¬ 
vantage  of  the  state's  early-retirement 
option,  which  he  became  eligible  for 


take  advantage  of  his  state's  full  retire¬ 
ment  benefits. 

LangfimL  a  project  manager  in  the 
Utah  Department  of  Techntdogy  Ser¬ 
vices,  jumped  around  a  lot  during  his  ca¬ 
reer,  which  shut  him  out  from  employer- 
sponsored  pensions.  By  his  own  account, 
he  was  lax  about  saving  for  retirement 
with  an  IRA  or  401(k)  plan.  In  fret,  he 
didn't  think  much  about  retirement  until 

so  many  times,  I  didn't  worry  about  it," 
Langfind  admits.  “Suddenly,  at  age  60,  it 
became  my  real  focus." 

Now,  while  many  of  his  peers  are 
pursuing  interests  like  fishing  and 


significant  chunk  of  their  value. 

Yet  the  real  barrier  between  Kuhi 
and  a  retirement  full  of  fishing  trips 


!ral  weeks  while  having  plenty  of 
mtime  between  assignments. 

:  saw  it  as  an  opportunity  to  have 
cond  phase  of  my  career,  slow  it 
m  a  bit  and  traveU"  be  says.  “But 


but  my  health  will  probably  be  sbo 
Lan^rd  is  realistic  about  what  il 
will  take  to  remain  an  asset  in  IT  fo 
another  couple  of  years.  He  is  plant 
to  get  a  Preq^  Management  Profes 


wrench  into  my  plans."  Now,  his 


llioniton  A.  Mn^' 


Where  Has  ITs 


w\ 


y  HEN  WAS  the  last  time  you  woke  up  and 
\  ^  /  wanted  to  go  to  work?  If  you  could  do  any- 
\  /  \  /  thing  you  wanted,  would  you  be  doing  what 

V  ^  you’re  doing  today?  The  futiure  of  IT  depends 

on  how  you  —  and  the  people  who  work  for  you  —  answer 
these  questions. 


A  dark  aura  of  angst 


seems  to  have  settled  on 
portions  of  the  IT  com¬ 
munity.  In  a  Jan.  6  Com- 
puten«or(d.com  article,  the 
always  insightful  Patrick 
Thibodeau  reported  on  a 
mid-2009  job  satisfaction 
survey  by  the  Corporate 
Executive  Board  that 
should  give  you  pause. 

It  showed  a  substantive 
worsening  in  an  already 
fnghtening  trend  of  IT 


from  the  purposes  and 
goals  of  the  enterprise. 

The  CEB  research 
indicates  that  in  2007, 
only  12%  of  IT  employees 
were  considered  “highly 
engaged."  In  2009,  that  un¬ 
acceptably  low  figure  had 
sunk  to  4%.  Can  this  actu¬ 
ally  be  true?  Can  96%  of 
the  IT  woriiforce  really  be 
less  than  wholly  enga^? 
Was  this  data  pulled  from 
a  particularly  dark  comer 
of  the  IT  world?  Are  the 
IT  shops  of  Western  de¬ 


mocracies  populated  by 


trance-walking  zombies 
exerting  just  enough  effort 
to  keep  from  going  into  the 
career  chipper?  If  the  data 
is  truly  representative  of 
what’s  happening  in  the 
IT  workplace,  the  question 
becomes.  What  are  you  as 
an  IT  leader  going  to  do 
about  it? 

While  things  may  not 
be  as  dire  as  the  CEB  data 
indicates,  it's  likely  that 
just  about  every  CIO  in  the 
Global  2,000  h^  at  one 
point  in  his  career,  made 


management  in  which  be 
expressed  concern  over  the 

next  generation  of  IT  work- 

CTS.  Do  CIO  direct  reports 
have  the  skills  necessary  to 


manage  the  complexities 
of  the  future?  The  people 
at  the  top  of  the  enterprise 
have  their  doubts. 

When  I’ve  spoken  off 
the  record  with  CIOs’ 
direct  reports  around  the 
world,  they’ve  echoed  this 
concern.  Those  who  will 
lead  next  aren’t  convinced 
that  they  have  the  execu¬ 
tive  leadership  toolkits  for 
what  comes  next  in  IT. 
Currently,  very  little  is 
being  done  to  bridge  this 
leadership  skills  g^. 

Further  validation  of  the 
looming  development  crisis 
in  nr  comes  from  the  deans 
of  executive  education  pro¬ 
grams  around  the  world, 
who  say  that  there  is  no 
tougher  sell  than  trying  to 
persuade  organizations  to 


■  Canitmyiybe 
tnw  thiit  96*ra  of 
the  IT  woriribrce 
is  less  than  wholy 


one.)  Louis  Pasteur  once  fa¬ 
mously  remarked,  “Chance 
favors  the  prepared  mind.” 
Who  is  preparing  the 
minds  of  next-generation 
leaders  for  what’s  to  come? 

That  there  is  cause  for 
concern  is  widely  acknowl¬ 
edged,  but  still  we  fail  to 
act.  We  are  anxious  but 
immobilized.  Many  execu¬ 
tives  in  rr  are  sleepwalk¬ 
ing  through  a  high-risk 
(and  high-opportunity) 
moment  in  history.  IT  is 
ing  a  IS-year  window 
of  unprecedented  opportu¬ 
nity  to  create  competitive 
advantage  with  technology. 

'Th^  is,  if  IT  can  crawl  out 
from  under  the  ambition¬ 
crushing,  innovation¬ 
sucking,  soul-destroying 
minutiae  of  just  keeping 
the  digital  lights  on. 

When  Jimmy  Carter 
gave  his  inaugural  address 
in  1977,  at  a  low  moment  for 
the  country,  he  reminded 
Americans  that  “even  our 
great  nation  has  its  recog¬ 
nized  limits. ...  We  cannot 
afford  to  do  everything, 
nor  can  we  afford  to  lack 


invest) 
opment  programs  for  their 
IT  staffs.  (There  are,  of 
course,  exceptions.  If  they 
gave  Nobel  Prizes  for  IT 
staff  development,  Barbra 
Cooper  at  Toyota  would  get 


future.  So  together,  in  a 
spirit  of  individual  sacrifice 
for  the  cotrunon  good,  we 
must  simply  do  our  best.” 

The  next  generation  of 
IT  leaders  is  ready  to  step 
up  and  do  their  b^.  Will 


them  the  tools  and  devel¬ 
opment  support  to  make 
that  happen?! 

ThoniiM  A.  Mav  is  a  long¬ 
time  industry  observer, 


learning  that  double-digit 
physical-to-virttial  server 
ratios  are  things  of  the  past. 


hype  or  internal  ROI  issues, 
could  spell  trouble  for  IT 
teams.  That’s  because  the 
consolidation  rate  affects  just 
about  every  aspect  of  a  vir¬ 
tualization  prefect  —  budget, 
capacity  and  executive  buy- 
in.  “If  you  go  into  these  virtu¬ 
alization  projects  with  a  false 
expectation,  you're  going  to 


(VM)  on  a  single  physical 
machine.  But  IT  managers 
and  industry  experts  say 
those  ratios  are  dangerous 
in  production  environments 


If  you  go  into 
these  virtual¬ 
ization  projects  with 
a  false  expectation, 
you’re  going  to  get 
in  trouble. 


server  hardware,  rack  space, 
cooling  capacity  and  power 
consumption  —  all  of  which 
cost  money.  Worse  yet,  users 
could  be  affected  by  poorly 
performing  applications.  “If 
a  company  thinks  they’re 
■  need  10  servers 


tions,  that  munber  tends  to 
plummet  to  less  than  15,“  says 
Andi  Mann,  vice  president  of 
research  at  Enterprise  Man- 


500  end  users,  EMA  found 
that,  on  average,  enterprises 
were  achieving  6d  constdi- 
dation  rates  for  applications 
such  as  ERP,  CRM,  e-mail 


especially  m  this  economy.” 
says  Charles  King,  president 
and  principal  analy^  at 
consultancy  Pund-IT  Inc.  in 
Hayward,  Calif 
l^y  is  there  a  discon- 


expectations  and  reahty? 
King  says  that  up  to  this 
point,  many  companies  have 
focused  on  virtualizing 
low-end,  low-use,  low-I/O 
applications  such  as  test,  de¬ 
velopment,  log,  file  and  print 
servers.  “When  it  comes 
to  edge-of-netwoik,  non- 

that  don’t  require  high  avail¬ 
ability,  you  can  stack  dozens 
on  a  single  machine,”  he  says. 

BobGilfananalystatThe- 
InfiiPro  Inc,  agrees.  “Early  on, 
people  were  virtualizing  sys¬ 
tems  that  had  a  less-than-S% 
utilization  rate.  These  were 
the  applications  that,  if  they 
went  down  for  an  hour,  no 
one  got  upset,”  be  says. 


Of  Server 
Oveiload 

Vendors  claim  you  can  pack 
dozens  of  virtual  machines 
inside  one  physical  server. 
But  that’s  a  bad  idea  for 
heavy-duty  applications. 
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and  virtualization  vendors, 
on  the  whole,  have  been 
slow  to  explain  this  reality 
to  customers,  according  to 
some  analysts. 

Once  you  consider  ap¬ 
plications  with  higher 
utilization  rates,  greater 
security  risks,  and  increased 
performance  and  availabil¬ 
ity  demands,  consolidation 
ratios  drop  off  considerably. 
"These  applications  will 
compete  for  bandwidth, 
memory,  CPU  and  storage," 
King  says.  Even  on  ma- 


depth  capacity  analysis  that 
monitored  server  hardware 
utilization.  (Similar  tools  are 
also  available  from  Cuba, 
Hewlett-Packard.  Microsoft, 
PlateSpin  and  Vizioncore, 
among  others.)  Rather  than 
lookiitg  at  his  hardware  en¬ 
vironment  piece  by  piece,  he 
instead  considered  every¬ 
thing  as  a  pool  resources. 
“Capacity  planning  should 
focus  on  tte  resources  that  a 
server  can  contribute  to  the 
virtual  pool,”  Jmaeff  says. 

Alreatdy,  the  team  has  been 
able  to  consolidate  250  serv¬ 
ers  —  50%  of  the  server  farm 
—  onto  12  physical  hosts.  And 
while  Jmaeff  s  overall  average 


team  quickly  learned  that 
when  it  comes  to  virtualizing 
mission-critical  plications, 
you  have  to  consider  more 
thanjustRAM."Weorigi- 
nally  thought,  based  on  avail¬ 
able  RAM,  we  could  have 
40  small  customers  share  a 
physical  server.  But  we  found 
that  with  heavier-used  appli¬ 
cations,  it’s  not  the  RAM.  it’s 
the  lA),”  says  CSiief  Technol¬ 
ogy  Officer  Shaun  RetaiiL 
The  40:1  ratio  had  to  be 
pulled  back  to  no  greater 
than  20-J.  he  says.  To  help 
with  that  effort,  the  team  has 
developed  a  control  panel 
that  allows  customers  to  log 
in  and  see  how  their  virtual 
machines  are  handling  reads. 


hinder  your  consolidation 
ratio,”  says  Nelson  Ruest,  co¬ 
author  of  Virtualization:  A 
Beginner’s  Guide  and  founder 
of  Resolutions  Enterprises, 
a  consultancy  in  Victoria, 
British  Columbia.  Instead. 

IT  staffers  should  make  sure 
that  workloads  are  hetero¬ 
geneous  and  well  balanced 
based  on  peak  usage  times 
and  resource  demands. 

Ruest  also  warns  IT  teams 
not  to  forget  the  spare  re¬ 
sources  that  host  servers  need 
so  they  can  not  only  support 
their  own  VMs,  but  also  ac¬ 
cept  the  workload  from  a  foil¬ 
ing  host  “If  you’re  running  all 
your  servers  at  80%.  you  won’t 
be  able  to  support  that  neces¬ 
sary  redunda^,”  he  says. 


mmi 

acronym  to  learn  — 
and  fast:  IFRS. 

US-conqianiesare 
facing  big  changes  in 
how  they  handle  fi- 
nancial  reporting,  with 

FneUM 

the  expected  adoption 
of  new  accounting 
rules  known  as  the  In- 
temational  Fmancial 

Reporting  Standards, 
or  IFRS.  And  while 
fiscal  concerns  gener- 

ACCOUHTIK 

ally  faU  into  the  chief 
financial  officer's  dtWin.  the  expected 
accounting  changes  will  affect  IT.  too. 

“It’s  a  CFO  problem  on  Day  1.  On  Day 

2,  if  the  CIO  or  IT  folks  aren't  involved 
in  the  project,  then  it  will  be  one  of  the 
things  that  will  end  up  on  their  plate  for 
certain,”  says  Dwayne  Cook,  partner 

CIOs  need  to  start  converting  financial 
reportino  systems  to  the  accounting 

and  practice  leader  for  the  Mid-Atlantic 
area  at  Tatum  LLC,  an  executive  ser¬ 
vices  and  consulting  firm  in  Atlanta. 

The  accounting  overhaul  stems 
from  the  expected  switch  from  the 

standard  used  overseas,  by  marv  k.  Piun 

long-standing  US.  Generally  Accepted 
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Terri  McClemenIs.  a  partner  an>U  S.  IFRS 
advisory  leader  at  PricewaterhouseCoo* 
pers.  advises  CIOs  to  work  with  the  CFOs 
organization  to  build  a  team  to  handle  the 
conversion  to  IFRS.  The  IT  team  mem¬ 
bers  should  ask  the  following  questions: 


:  .  .1 

The  goal  of  the  move¬ 
ment  toward  International 
Financial  Reporting  Standards 
IS  to  have  a  single  set  of  global 
accounting  rules. 

U.S.  and  in¬ 
ternational  accounting  boards 
have  numerous  “convergence" 
efforts  under  way  to  reduce  the 
differences  between  U.S.  Gener¬ 
ally  Accepted  Accounting  Prin¬ 
ciples  and  IFRS,  such  as  their 
differing  treatment  of  revenue 
recognition. 

The  greatest  differ¬ 
ence  between  IFRS  and  U.S. 
GAAP  IS  that  IFRS  provides 


much  less  detail.  The  IFRS, 
which  sets  out  principles,  is 
about  2.500  pages  long,  where¬ 
as  the  more  rules-based  U.S 
GAAP  is  about  17.000  pages. 

The  SEC  is  expected 
to  decide  in  2011  whether  to 
mandate  the  adoption  of  IFRS 
rules  by  U.S.  companies,  which 
would  have  several  years  to  con¬ 
vert.  According  to  the  SEC's  cur¬ 
rent  timeline,  the  largest  compa¬ 
nies  would  start  IFRS  reporting 
in  2014.  and  all  public  companies 
would  switch  by  2016. 

Over  100  countries 
have  already  adopted  IFRS,  and 
that  number  will  increase  to 
more  than  150  In  2011.  Brazil. 
Canada  and  South  Korea  are 
expected  to  adopt  IFRS  in  2011, 
with  Mexico  on  board  m  2012 


SOFTWARE  ■ 


business  process  responsible  for  col¬ 
lecting  that  data,"  Fedorowicz  says. 

Consider,  for  example,  that  the  finance 
department’s  applications  might  rdy  on 
inventory  figures  that  are  coming  fixxn, 
say,  a  manufacturing  application.  Fedo- 
iDwicz  says  that  that  manufacturing  sys¬ 
tem,  as  well  as  all  other  applications  that 
provide  accounting  and  financial  data, 
will  need  to  confirm  to  IFRS. 

“A  lot  of  people  say  [IFRS  will  affect] 
just  the  fimmcial  reporting  ledger.  They 
think  the  financial  people  will  just  be 
able  to  figure  it  out.  But  you  won’t  be 
able  to  get  the  needed  information  from 
the  general  ledger,”  says  Terri  McCle- 
ments,  a  partner  and  US.  IFRS  advisory 

#  #  Dapeniingontheso- 
■■  hitHNiandwhereyDU 
want  to  address  it  couM 

cost  in  the  mBons  of  dolars. 

KEN  OABRIEL,  PARTNER.  KPMG 

said  that  IT  expenses  generally  ac¬ 
count  for  more  than  S0%  of  the  cost  of 
an  IFRS  conversion. 

“Depending  on  the  solution  and 
where  you  want  to  address  this,  it 
could  cost  in  the  millions  of  dollars," 
Gabriel  says.  And  that  will  need  to  be 
budgeted  well  in  advance,  which  is 

prepared  could  be  pretty  severe.  Cook 
says.  If  you’re  not  ready  on  time,  your 
finance  department  might  be  forced 
to  convert  figures  from  GAAP  to 

IFRS  manually  —  a  time-consuming 
and  costly  endeavor.  Or  you  might 
have  to  perform  patch  fixes  to  your 
system,  which  could  lead  to  costly  and 
embarrassing  errors. 

“I’ve  seen  it  done  in  other  countries 
as  an  afterthought,"  Cook  says,  “and 
companies  spend  a  lot  more  time  and 
a  lot  more  money  if  they  don’t  do  the 
proper  planning."  ■ 

Pratt  is  a  Computerworld  contributing 
writer.  Contact  her  at  marykpratt@ 
verizoruiet. 

leader  at  PricewaterhouseCoopers  LLP. 

Although  systems  throughout  the 
organization  will  be  affected  by  the 

Gabriel  suggests 


1 

i  ^ 

1 

wfttAtmmWLWhen 

X  executives  get 

interactive  content  into  your 

training  program. 

j  money  to  spend  on 
Amm  “soft”  projects  like 

curity  experts  often 
say  that  insiders  are 

1  the  biggest  threat  to 
corporate  informa¬ 
tion,  and  the  list  of  breaches 
maintained  by  the  Privacy 

Rights  Clearinghouse  is  dot¬ 
ted  with  incidents  resulting 

privacy  training,  the  natu¬ 
ral  first  step  is  to  launch  an 
awareness  campaign.  Some 
deploy  computer-based 
training  modules.  Once  they 
do  that,  they  might  think 
that  they  have  a  program  in 

place.  But  there’s  a  differeiKC 
between  hitting  employees 
with  one  or  two  messages  a 
year  and  surrounding  them 
with  reminders  that  the  poli¬ 
cies  are  real,  have  teeth  and 

Employee  training  is  proba¬ 
bly  the  most  important  cran- 
ponent  of  an  information  risk 
management  process.  Yet 
few  companies  actually  mea- 

DataSecurityStandaiare- 
ijuires  it  The  ISO  27001  stan¬ 
dard  requires  it  In  £act,  every 
regulation  tbat  mandates  that 
reasonaUe  measures  be  taken 
to  protect  information  im- 
plkdtly  requires  companies  to 
set  up  training  programs  to 
help  employees  understand 
what  those  measures  are. 

But  what  does  training 
actually  mean? 

Many  corporations  have 
adopted  a  check-box 
pro^  toward  compliance 
with  this  obligation.  Here 
are  five  shortcuts  I  see  them 
taking  instead  of  using  the 
opportunity  to  ensure  that 
employees  really  know  how 
to  protect  infinmation. 


one  from  your  chief  infbr- 
nuition  security  officer,  and 
an  annual  sign-off  on  the 
code  of  ethics  from  your 
legal  department?  You’re  not 
alone.  In  large  companies, 
the  people  responsible  for 
specific  functions  don't  want 
to  dilute  their  messages  by 
mixing  them  with  related 
topics.  So  they  each  go  their 
own  way  with  training  and 
awareness.  The  result  is  con¬ 
fused  employees  who  just 
want  one  place  to  go  to  learn 
the  do’s  a^  don’ts  of  infor¬ 
mation  management. 


company  post 
PowerPoint 


presentations  to  an 
intranet,  send  out  some 
e-mails,  put  up  some  posters 
and  say  h  has  a  privacy  and 
sectuity  training  program? 
An  effective  information- 
risk  training  program  will 
certainly  include  awareness 
campaigns,  but  it  will  also 
include  role-based  training 


about  what  they  should  be 
doing  to  implement  those 
policy  objectives. 


■  I  face  it  We  live 
I  in  a  multimedia 
world.  Our  employees  are 
used  to  big-screen  TVs, 
sophisticated  visual  effects, 
podcasts,  chat  and  more.  Yet 
how  many  of  our  awareness 
campaigns  are  limited  to  a 
few  e-mails  and  a  couple  of 
PowerPoint  presentations? 
Consider  incorporating 
sound,  moving  pictures  and 


The  trainer  walked  us  past 
the  dau  center,  gathered  U! 


a  conference  room  and  drew 
a  big  circle  on  the  board.  She 
paused,  looked  us  in  the  eyes, 
and  said.  “Everything  you 
do  here  will  fall  somewhere 
on  this  board.”  Some  of  our 
choices,  she  said,  would  be 
deemed  wrong  by  everyone 
and  would  fell  outside  the 
circle.  Some  would  fall  into  a 


circle.  But  at  this  company, 
she  said,  putting  a  dot  on  the 
board,  our  choices  had  to  be 
at  the  center  of  the  drcle. 

That  told  me  everything 
I  needed  to  know  about  that 
conqjany’s  policies  and  eth¬ 
ics.  Will  employees  remem¬ 
ber  as  much  about  your  pri¬ 
vacy  training  and  awareness 
program  10  years  from  now?  ■ 
dm,  a  former  chief  privacy 
officer  at  a  Fortune 500 com¬ 
pany,  is  president  of  Min¬ 
nesota  Privacy  Consultants 
and  a  Computerworld.com 
columnist.  You  can  contact 
himatcwprivacy@ 
computeTworld.com. 
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■  SECURITY  MANAGER’S  JOURNAL  MATHIAS  THURMAN 

Trodble 

Ticket 

AT  ISSUE:  Tlwra'k 

Latest  Malware 
tea  Cal  to  Action 

big-fMwt  nahmn  has 

ACTKMPIAN:  Track  R 
down,  mol  H  out,  and  bw 

ers,  mainly  to  development 

Practice  tempeis  ^ic.  But  the  Google 
‘Operation  Aurora  malware  required  a 
few  extra  precautions. 

were  outbound  cormectioas 
on  Port  80,  which  thank¬ 
fully  were  blocked  by  our 
content-fikering  engines. 

We  then  contacted  our 
antivirus  vendor.  Trend 
Micro,  which  released  pat¬ 
tern  files  for  our  OfficeScan 

the  experience  to  dea 
th  that.  And  1  hadn't 
!n  any  unusual  activity 


and  because  we  use  Trip-  sheer  amount  of  log  data,  daU-coUection 

wire  to  detect  changes.  but  we  were  able  to  identify  programs. 

After  a  thorough  review  some  beaconing  hosts.  The  forensic 

conducted  using  various  analysis  contin 

tools  and  Unix  compro-  01661110  DEEPER  ues.  and  we  pis 


work  bandwidth  anoma¬ 
lies,  no  sudden  increases 
in  help  desk  calls  related  tc 
system  weirdness  and  no 
mentions  on  the  various 
threat  blogs  that  ours  was 
a  victimized  domain. 

Still,  this  piece  of  mal¬ 
ware  was  reported  to  be 
more  sophisticated  than 


seemed  unhacked.  signatui 
The  next  task  was  to  sensors.  It  detected  at-  malware  from  impa 

tempts  to  exploit  the  Inter-  our  environment.  ■ 

net  Explorer  vulnerability  This  week's  journal 

■  MUianymalWira,  that  had  enaUed  this  whole  ten  by  a  real  securit] 

I  MliilUP  lOnWIMO  mess.  Almost  immediately,  ager,‘1talMaa1hun 

ftlit  And  we  began  to  see  alerts  from  whose  name  and  em 

every  sensor,  in  the  US,  have  been  disguised 

■>  >  IWOy  Germany,  Taiwan,  Hong  obvious  reasons.  Co 

Stflte  MMHIMRiRf 


whose  name  and  employer 
have  been  disguised /or 
obvious  reasons.  Contact 
him  at  mathias_thurman@ 
yahoo.com. 


FEBRUARY  I 


■  OPINION 

Wwi  Perkir^^ 


Cloudy,  WHh  a 
Chance  of  Trouble 


ANY  ORGANIZATIONS  are  considering  shut¬ 
ting  down  their  data  centers  and  migrating 
most  IT  functions  to  the  cloud.  Beware,  though: 
Not  all  clouds  are  soft  and  fluffy. 


Before  committing  to  a 
migration  to  cloud  comput¬ 
ing.  you’ll  need  to  weigh  a 
number  of  issues.  Here  are 
some  of  the  thornier  ones 
you  should  address: 


customer  input.  Don’t  ex¬ 
pect  to  know  where  your 
problems  fall  on  your  pro¬ 
vider’s  priority  list,  or  to 
receive  any  hand-holding. 
|jigallnuM.Govem- 


Union  privacy  laws  pro¬ 
hibit  certain  ^ta  frt^ 
crossing  borders.  And 
conducting  a  SAS  70  audit 
is  extremely  difficult  in  the 
cloud.  Companies  must 


IntanwIaixM.  Cloud 
applicatkxis  require  reliable 
high-speed  Internet  access. 
Although  Internet  service 
is  increasingly  reliable,  all 
carriers  experience  period¬ 
ic  problems.  And  when  an 
outage  occurs,  you’ll  have 
to  be  patient.  Your  outage  is 
unlikely  to  be  fixed  before 
the  problem  is  solved  for 
everyone.  Moreover,  most 
carriers  still  have  difficulty 
supporting  multiple  large- 
bandwidth  requests  simul¬ 
taneously.  Critical  cloud- 
based  services  require 
comprehensive  contingency 
plans  that  involve  multiple 
Internet  access  points. 

Support.  Cloud  custom¬ 
ers  do  not  control  update 
schedules  or  problem- 
resolution  priorities. 
MySAP,  Salesforce.com, 
Flickr  and  other  cloud 
providers  update  software 
based  on  utiknown  in¬ 
ternal  criteria,  with  little 


ment  regulations  deter¬ 
mine  how  people  with  fidu¬ 
ciary  responsibilities  can 
communicate  with  then- 
clients.  Want  to  use  TWit- 
ter  to  contact  clients?  If 
you’re  a  fiduciary  trustee, 
you  should  think  about 
federal  records  retention 
regulations.  Virtually  all 
Web  2.0  services  lack  suf¬ 
ficient  user-level  backup 
capabilities.  You  can  hire 
programmers  with  Web  2.0 
expertise  or  subscribe  to 
a  service  like  Backupify. 
But  even  then,  some  data 
may  be  inaccessible  —  for 
example,  there  is  currently 
no  way  to  download  videos 
fiom  Facebook. 

What’s  more,  the  physi¬ 
cal  location  of  cloud  data 
is  unknown.  European 


■  Beware:  Not 
al  clouds  are 
soft  and  fluffy. 


rely  on  cloud  providers 
for  compliance,  but  who  is 
ultimately  responsible  for 
vidations?  Moreover,  liabil¬ 
ity  for  a  doud  data  breach  is 
unclear.  Who  will  pay? 

Data  raWavaL  Cloud  pro¬ 
viders  make  it  easy  to  up¬ 
load  data.  Unfortunately, 
each  provider  uses  propri¬ 
etary  data  definitions  and 
data  structures.  In  addi¬ 
tion.  they  offer  no  simple 
tools  for  downloading  bulk 
data.  So,  what  goes  up  may 
not  come  down.  Most  cus¬ 
tomers  are  forced  to  use  an 
Internet  connection,  often 
at  unacceptably  slow  data- 
transfer  rates.  At  100Mbit/ 
sec.,  it  takes  one  to  two 
days  to  export  STB.  Worse, 
it  can  be  extremely  ex¬ 
pensive;  Amazon  charges 
10  cents  per  gigabyte,  or 
$100,000  per  petabyte,  to 
download  data  from  its  S3 
storage  service. 

SLAa.  Cloud  providers 


have  different  service- 
level  targets.  For  example, 
Amazon,  Rackspace  and 
3Tera  define  an  outage 
differently.  Furthermore, 
each  provider  uses  a  differ¬ 
ent  process  to  document 
outages  and  process  any 
resulting  user  credits. 

Oownmica.  The  cloud 
makes  it  easy  for  rogue 
dei>artments  to  implement 
new  services  without  ITs 
knowledge.  If  the  offend¬ 
ing  departments  are  not 
IT-sawy,  new  systems 
may  be  implemented  with 
insufficient  documenta¬ 
tion.  ineffective  security 
or  nonexistent  workload 
management.  And  guess 
who  will  have  to  support 
those  loser  apps! 

FimiieUeaiiipInlly.  Es¬ 
tablished  companies  have 
enormous  investments 
in  infrastructure.  To  be 
financially  viable,  provid¬ 
ers  must  create  financial 
models  that  offset  total 
migration  costs.  Do  a  com¬ 
prehensive  financial  analy¬ 
sis  before  committing. 

Cloud  computing  is  es¬ 
sentially  just  another  type 
of  outsourcing,  with  simi¬ 
lar  risks  and  benefits.  Are 
you  ready  to  trust  the  cloud 
with  your  most  precious 

generating  systems?  Don’t 
leave  your  organization 
expos^  to  thunder  clouds; 
lightning  may  strike  at  any 
moment.* 

Bart  hrtdai  is  managing 
partner  at  Louisville,  Ky.- 
based  Leverage  Partners 
Inc,  which  helps  organiza¬ 
tions  invest  well  in  IT.  Con¬ 
tact  him  at  BartPerkins@ 
LeveragePartners.com. 
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Desktop  with  Spider 
Network  with  Spider 

publish  (for  portable 

Web  with  Spider 


♦  25+  full-text  and  fielded  data  search  options 

♦  S^er  suprorts  static  and  dynamic  web  data;  highlights  hits 
with  links,  formatting  andJIWIgg  intact 

♦  API  supports  .NET.  C++.  SQU  Java,  etc  .NET  Spider  API 

,  Content  extraction  only  licenses  also  available 

"Bottom  line:  dtSearch  manages  a  terabyte  of  text  in  a  single 
index  and  returns  results  in  less  than  a  second"  -  InfoWorld 
dtSearch  "covers  all  data  sources  ...  powerful  Web-based 
engines"  -  eWEEK 

"Lightning  fast ...  performance  was  unmatched  by  any  other 
product"  -  Redmond  Magazine 

hundreds  more  reviews,  and  hundreds  of  developer  case 
studies,  see  www.dtsearch.com 

^It - 


1-800-IT-FINDS  •  www.dtSearch.com 

_ The  Smart  Choice  for  Text  Retrieval*  since  1991 


pick  the  topics, 
pick  the  sources, 
pick  the  frequency. 


MicroGoose 

fClimate  Monitor 

$199 

b  Interface  ■  »  # 
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Power  over  Ethernet  Enabled 
E-mail  Alarms  &  Escalations 
SNMP,  XMl,  HTTP,  HTTPS 
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Career 


I  ASK  A  PREMIER  100  IT  LEADER 


K  a  Carroll 

'  The  managing 
director  of  infor¬ 
mation  technolo¬ 
gies  at  the 

,  Golf  Association 

answers  questions  on  skills, 
leadership  and  staying  in  IT. 


WMfUbdorMiiMnkwfll 
bi  moit  valuibl*  to  acquira  In 
2010?  Adaptability,  an  un¬ 
derstanding  of  the  evolving 
cloud  environment  and  the 
ability  to  listen  to  the  needs. 


and  how  to  adapt  it  to  ef¬ 
fectively  enhance  your  co 
pany’s  work  processes. 


Job  Competition 

You  alraady  loMW  that  Datroit  h  a  tough  placa  to  got  a  lob 
thaaa  days,  and  you  mighl  ba  awara  that  ona  of  Ilia  inaia 
stabh  amptoymsiit  aaetora  right  now  It  govanunaaL 
Juiu4um  wrivad  at  tha  tanw  oonchniom  by  cakulalb^ 
lha  nundiar  of  unanqdoyad  paoplt  avalaUa  lor  aach 
adatrllsad  lob  hi  SO  top  matropoMan  araaa.  Kara  ira 
tha  lop  and  bottoni  fno.  Vdu  can  laarn  about  olhar  localat 
by  vWting  tha  praaa  araa  ol  tha  company's  Wab  tHa 


2009 was  a  rough  yaar  forma,  think  differently  to  solve 

with  pav  cuts  and  canatant  problems  more  efBciently, 

worry  abauttaysflt.  Thanh-  and  it  opened  everyone’s 
fHly,rvsauryi«sdaofar,but  minds  to  trying  new  tech- 
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Place 
your  Labor 
Certification 
Ads  here! 

Are  you 
frequently 
placing  legal  or 
immigration 
advertisements? 

Let  us 
help  you 
put  together 
a  cost  effective 
program  that 
will  make  this 
time-consuming 
task  a  little 
easier. 


800.762.2977 
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ATTENTION... 

Law  Firms 
IT  Consultants 
Staffing  Agencies 

Are  you  frequently 
placing  legal  or 
immigration  advertisements? 

Let  us  help  you  put 
together  a  cost-effective 
program  that  will  make  this  time- 
consuming  task  a 
little  easier! 


Place  your 

Labor  Certification  Ads 
here! 


the  NgMs  on  cinwus  ind  in 
the  entire  airrounding  iraa. 
“We  ddnl  hm  a  generator 


Shariflank 

TRUE  TALES  OF  IT  LIFE  AS  TOLD  TO  SHARKY 


Now  THAFS  What 
We  Call  an  Excuse! 
PiiotfBhgalsahetpdeskcal 
fromaueerwhoaisohap- 
pons  to  be  a  friend,  lie  said 
ha  was  bringing  his  iaptop 
to  IT  to  hx  a  prabiam  he  was 
having  with  printing,'' hsh 
reports.  “Several  hours  wont 
by  wHhout  the  user  showing 
up,  though.  The  next  morning, 
his  boss  brought  the  iaptop 
by,  saying  that  the  user  was 
out  sick.  One  took  at  the 
laptop  toM  us  that  something 
was  radically  wrong  -  the 


interconnect  cable,  the  kar 
board  had  bean  destroyed, 
and  the  laptop  was  generally 
trashed.  Turns  out  the  user 
was  bringing  the  laptop  to  the 
IT  office,  but  while  crossing 


botwean  buildings  he  wi 


large  tailing  icicle,  which 
not  only  soriousiy  fcdured  the 
user  but  sent  the  laptop  fly¬ 
ing,  ffc  boss  was  sta  sure 
we  could  lust  put  It  bach 
together.' We're  going  to  tha 
hospital  this  afternoon  to  visit 
theusar.' 

Unclear  on  the  Whole 
miakeWoili’ConMiit 

This  IT  manager  plot  hsh 


plant  way  out  in  tha  boon- 
docks  and  -  as  usual  -  any¬ 
thing  wiihelactricity  flowing 
through  His  part  of  his 
responsibilHy.  “That  incliides 
the  muMtine  phone  system,' 
says  hsh.  “One  day  the  boss 
also  assigns  me  to  review 


the  monthly  hafl-ineh-thicfc 
phone  kivoica,  saying.  It's 
part  of  the  phone  system.' 

So  I  track  down  all  the  hard- 
copper  fax  Ikies  and  find 
several  not  ki  use,  but  ws'ra 
paying  for  them.  I  dig  daepor 
and  find  a  lease  on  a  IHtle 
twD-lbiephoneatoneofour 
smal  ofhcss  further  out  In  the 


paying  for  monthly  for  savaral 
years,  and  H  doesn't  even  ex¬ 
ist  anymore.  None  of  this  faz¬ 
es  tha  boss.  Final  straw;  I  un- 


ur  last  phone  system  that 


rpiartariy  for  about  five  years. 
After  I  report  this  to  my  boss 
and  to  corporate,  all  phone- 
system  bWs  and  contracts  are 


But  He  Did  Work 
ROutbyHinKelf 

At  the  smal  coflage  where 
this  pilot  hsh  works,  a  big 
power  talure  puts  out  al  of 


says  hsh. 'The  campus  maki- 


to  al  users,  lotting  them  know 
that  the  power  talure  would 
probably  last  savaral  hours. 
After  a  few  minutes,  ha  caled 
back  and  sheepishly  said. 


■  Don't  kavt  Sharky  in  the 
dark  with  nothing  to  do.  Send 
me  your  true  tale  ofIT  life  at 


Itljile  off  the  identifying 
marks,  and  youV  snag  a 
snazzy  Sha^  shirt  i/1  use  it 


■  OPINION 

Scot  Finnic 


IT  Shops,  H’s  Time  to 
Restart  Your  Engines 


SOME  PEOPLE  are  loath  to  come  right  out  and  say 
thk,  but  I  will:  The  recession  is  over,  and  when  the 
numbers  are  all  sorted.  I’m  guessing  the  experts  will 
say  we  mmed  the  comer  early  last  fall,  if  not  sooner. 


Sure,  there  are  quali¬ 
fiers.  With  such  a  deep 
recession,  the  recovery 
may  be  slow.  Jobs  are  a 
lagging  indicator,  and  we 
may  have  double-digit  un¬ 
employment  for  smne  time 
to  come.  And  the  housing 
market  is  still  weak. 

But  the  technology  sec¬ 
tor  is  &r  from  weak.  In 
fact,  technology  looks  to  be 
leading  the  charge.  Over 
the  past  few  weeks,  there's 
been  up-and-down  news 
about  the  economy.  But 
when  you  home  in  on  tech 
financials,  IT  spending 
forecasts  and  tech  vendors’ 
quarterly  sales  figures, 
things  are  looking  upbeat. 

A  few  weeks  ago,  for 
example.  Gartner  raised 
its  2010  worldwide  IT 
spending  growth  projec¬ 
tion  to  4.6%  from  3.3%. 
Although  that's  fairly  mod¬ 
est  growth,  it  represents 
a  big  swing  from  2009’s 
4.6%  drop  in  IT  spending. 
Forrester,  meann^le,  is 
projecting  6.6%  IT  spend¬ 
ing  growth  this  year. 

Maybe  you  aren't  terribly 


concerned  because  the  full 
effects  of  this  recessimi 
were  never  felt  in  your  IT 
shop.  Chances  are  good 
that  your  IT  organization 
didn’t  stop  spending  entire¬ 
ly  and  continued  rolling  out 
projects,  implementing  new 


infrastructure  and  perform¬ 
ing  iqigrades.  But  there’s 
a  g0(^  chance  that  you 
did  lose  some  personnel 
or  at  least  saw  new  hiring 
postponed,  and  you  almost 
certainly  had  to  cancel  or 
delay  some  prt^ects.  Most 
IT  shops  aren’t  running  at 
anywhm  near  full  speed. 

And  if  you  work  in  one 
of  those  shops,  you  might 
want  to  heed  this  very 
sound  advice,  which  Com- 
puterworld  offered  in  the 
story  “Recovery  Ahead" 
back  on  Aug.  Kk 


going  to  be^  to 


ing  this  the  time 
for  IT  shops  to  act 


“Once  the  business 
demand  for  IT  services 
starts  growing  in  an  eco¬ 
nomic  recovery,  it’s  far 
too  late  for  an  in-house  IT 
department  to  ramp  up  to 
meet  that  demand.  The 
time  to  prepare  for  a  recov¬ 
ery  is  just  before  the  reces¬ 
sion  starts  tq  bottom  out. . . . 
You  can’t  id^  wait  untii  the 
recessioyis  declared  over.” 

Thatadvice  may  have 
been  difficult  to  act  upon 
last  summer,  though.  The 
climate  at  many  organiza¬ 
tions  has  been  cautious 
to  the  point  of  paraiysis 
—  and  that’s  con^letely 
understandable,  given  the 


But,  ITleaders,  this  is 
your  final  wake-up  call 
Six  months  from  now,  you 
won’t  be  able  to  afford  to  be 
complacent.  Business  is  go¬ 
ing  to  begin  to  rev  up,  and 
now  is  the  time  to  lobby 
for  new  head  count,  place 
orders  for  new  enterprise 


due  diligence  on  major 
new  projects,  spend  money 
on  training  and  line  iqrout- 
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sourcing  partners. 

And  if  it’s  still  early  in 
your  fiscal  year,  this  might 
also  be  the  time  to  double¬ 
down  with  your  budget  on 
a  medium-size  project  that 
you’ve  had  in  your  back 
pocket.  It  should  be  some¬ 
thing  that  has  an  excellent 
chance  of  saving  a  big  chunk 
of  change  or  facilitating  in¬ 
cremental  revenue  growth. 

If  you’re  not  convinced 
about  the  need  to  act  now, 
remember  the  principles 
of  supply  and  demand.  IT 
products  and  services  that 
haven’t  seen  much  demand 
lately  are  sure  to  be  less 
expensive  (and  delivered 
more  quickly)  today  than 
they  will  be  when  things 
are  really  booming  six 
months  from  now.  And  af¬ 
ter  the  economy  upshifts, 
it  will  be  much  more  diffi¬ 
cult  to  hire  talented  people 
with  valuable  IT  expertise 
than  it  is  right  now.  The 
better  talent  will  go  to 
those  who  act  first 

Sure,  recoveries  tend  to 
be  bumpy,  and  they  come 
to  different  companies 
and  industries  at  different 
times.  Temper  my  advice 
with  your  own  company- 
specific  insights.  Just  be 
prepared.  Properly  timing 
this  recovery  might  save 
you  and  your  company 
money  and  help  you  ad¬ 
dress  crucial  business 
needs  faster.  You  can’t  af¬ 
ford  to  wait  this  out  ■ 

Seal  Final*  is  Conq)uter- 
world's  editor  in  Mrf. 

You  can  catch  him  on 
Tmitter,  where  he  tweets 
as  @scotftnnie,  or  you  can 
e-mail  him  at  sfinnie® 
computerworld.com. 
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